TODO
====

* import-keys: do not use ssh if host is localhost.
* import-certs: concat.pem; cert.pem and cert.crt symlinks; restart services.
* compile: automatic definitions for per-node backup::users.
* provision: openssh-server installation should be optional and disabled for TPC profile.